The proliferation of information on the Internet and access to fast computers with large
storage capacities has increased the volume of information collected and disseminated …

Although several access control policies can be devised for controlling access to
information, all existing authorization models, and the corresponding enforcement …

In the future, a largely invisible and ubiquitous computing infrastructure will assist people
with a variety of activities in the home and at work. The applications that will be deployed in …

Protecting rights over relational data is of ever increasing interest, especially considering
areas where sensitive, valuable content is to be outsourced. A good example is a data …

Web-based applications greatly increase information availability and ease of access, which
is optimal for public information. The distribution and sharing of information via the Web that …

We address the problem of authorization in large-scale, open, distributed systems.
Authorization decisions are needed in electronic commerce, mobile-code execution, remote …

A major drawback of existing access control systems is that they have all been developed
with a specific access control policy in mind. This means that all protection requirements (ie …

Generalized Role-Based Access Control (GRBAC) is a new paradigm for creating and
maintaining rich access control policies. GRBAC leverages and extends the power of …

The increased awareness of the importance of data protection has made access control a
relevant component of current data management systems. Moreover, emerging applications …

Access control models, such as the ones supported by commercial DBMSs, are not yet able
to fully meet many application needs. An important requirement derives from the temporal …